Vulnerability Management Analyst
About The Position
SarelaTech is seeking an experienced Vulnerability Management Analyst (OS/Infrastructure) to support a Department of War (DoW) cybersecurity mission in Columbus, Ohio. This position will provide vulnerability management support for assigned information systems and computer networks, identifying vulnerabilities and assessing risk across operating systems, infrastructure, applications, databases, and other information system components. The Vulnerability Management Analyst will engage with stakeholders and mission partners to facilitate vulnerability discovery through manual review and vulnerability scanning tools. The analyst will coordinate remediation activities, prioritize remediation efforts based on risk, recommend appropriate actions to remediate vulnerabilities and mitigate risk, and validate completed remediation actions. The position will support implementation of required security configurations, including Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs), and support compliance with the DoD Information Assurance Vulnerability Management (IAVM) program. The analyst will track and report security and compliance issues and ensure compliance with DLA and DoD information security policy. The position may also support ACAS vulnerability scanning and reporting, cyber hygiene reporting, vulnerability remediation prioritization, and coordination with system administrators, Program Managers, ISSMs, and other cybersecurity stakeholders.
Requirements
- Five (5) years of relevant experience.
- Hands-on experience working with vulnerability scanners.
- Understanding of cybersecurity vulnerabilities and appropriate remediation techniques.
- Experience analyzing vulnerabilities and risk across operating systems, networks, applications, databases, or other information system components.
- Familiarity with DISA Security Technical Implementation Guides (STIGs).
- Familiarity with DoD vulnerability management and IAVM processes.
- Must possess a current certification meeting DoD 8570/8140 IAT Level II requirements (e.g., CompTIA Security+, GIAC Security Essentials, GCIH, GCFA, GCED, SSCP, CND, or equivalent).
- Active DoD Secret security clearance.
Responsibilities
- Provide vulnerability management support for assigned information systems and computer networks.
- Identify vulnerabilities and assess risk across operating systems, infrastructure, applications, databases, and other information system components.
- Engage with stakeholders and mission partners to facilitate vulnerability discovery through manual review and vulnerability scanning tools.
- Coordinate remediation activities.
- Prioritize remediation efforts based on risk.
- Recommend appropriate actions to remediate vulnerabilities and mitigate risk.
- Validate completed remediation actions.
- Support implementation of required security configurations, including DISA STIGs.
- Support compliance with the DoD Information Assurance Vulnerability Management (IAVM) program.
- Track and report security and compliance issues.
- Ensure compliance with DLA and DoD information security policy.
- Support ACAS vulnerability scanning and reporting.
- Support cyber hygiene reporting.
- Support vulnerability remediation prioritization.
- Coordinate with system administrators, Program Managers, ISSMs, and other cybersecurity stakeholders.
Benefits
- 401(k)
- 401(k) matching
- Dental insurance
- Health insurance
- Paid time off
- Profit sharing
- Training & development
- Tuition assistance
- Vision insurance
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
Education Level
No Education Listed
